mitmproxy vs tcpflow

mitmproxy

Description: mitmproxy is an open source interactive HTTPS proxy that allows traffic flows to be intercepted, inspected, modified, and replayed. It provides a console interface that allows traffic flows to be inspected and manipulated on the fly.

Type: software

Pricing: Open Source

tcpflow

Description: tcpflow is an open source tool for capturing TCP traffic flows. It works by capturing packets from network interfaces or packet capture files, reassembling TCP streams, and storing application-layer data with relevant TCP metadata.

Type: software

Pricing: Open Source

mitmproxy Features

• Intercepts HTTP and HTTPS traffic and allows inspection and modification on the fly
• Provides a console interface for interactive analysis
• Allows traffic replay for testing and experimentation
• SSL certificate spoofing for decrypting encrypted traffic
• Flexible filtering to only intercept traffic matching specific criteria
• Scripting interface to automate complex modification and replay tasks
• Export of intercepted data in various formats like HTTP, HAR, and mitmdump

tcpflow Features

• Captures TCP traffic flows from live network interfaces or packet capture files
• Reassembles TCP streams and stores application-layer data
• Stores TCP metadata like sequence numbers, acknowledgments, window advertisements
• Supports BPF filters for selective capturing
• Outputs flows in various formats like ASCII, CSV, JSON
• Can extract files based on signatures
• Has a library API for programmatic access

mitmproxy

• Open Source

tcpflow

• Open Source